Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
File:                     oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft (raw, json)
Hash identifier:          vk+SflyPl+tDh6VWO7tg+PftS3LQaFrxD3LhiSMaKQo=
Subject key identifier:   2B:DA:5F:D7:6D:55:B0:25:1E:54:CE:F6:26:26:B9:18:71:AF:16:5A
Authority key identifier: A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A
Certificate issuer:       /CN=a0dae7678a396969e6340c9dcb65cde9e329554a
Certificate serial:       018F8891DF616822234D9183C0F6628A2CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
Manifest number:          0887
Signing time:             Fri 17 May 2024 22:00:12 +0000
Manifest this update:     Fri 17 May 2024 22:00:12 +0000
Manifest next update:     Sat 18 May 2024 22:00:12 +0000
Files and hashes:         1: GfGtip2kmvCG2N_nrJc46-nfQR0.roa (hash: O7s04tsWX3cF0Oke4BYMU0PKfRUpiMPzbfNthTJU0jg=)
                          2: dpXNygCrZ3W-tOPTlaPT8MzdEtg.roa (hash: j4QkLZl9jjvZX5efkLwWSqLSx43IwaXgT7jPe2ORr6s=)
                          3: ec1yDP1OacrYWbRPBPYdB0IKQ9U.roa (hash: NWdmF6+DmnNG+7CDsQXZXSNfbTyAb9HyNpTTFxCyRxo=)
                          4: oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl (hash: ZbQTFbxi0d/pkV4QrQIUgoMoiybGHJXepmZD8GbF12o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:91:df:61:68:22:23:4d:91:83:c0:f6:62:8a:2c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0dae7678a396969e6340c9dcb65cde9e329554a
        Validity
            Not Before: May 17 22:00:12 2024 GMT
            Not After : May 18 22:00:12 2024 GMT
        Subject: CN=2bda5fd76d55b0251e54cef62626b91871af165a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:29:94:b2:86:c8:93:ae:c6:e8:01:32:73:ee:
                    75:51:89:61:6a:77:92:c3:6d:1a:06:7b:7e:92:f6:
                    ca:11:ce:d2:99:d0:33:39:2b:68:28:2d:d2:20:33:
                    43:b7:bc:80:2e:a5:51:cb:4a:f0:53:c0:9c:5b:e7:
                    1f:65:7e:05:84:c9:85:1d:52:f9:6c:59:b8:c2:02:
                    30:3e:d4:5a:10:f3:b9:2b:35:99:54:25:40:0c:97:
                    da:59:bf:95:2b:57:3c:dc:62:ec:d1:9b:86:bb:80:
                    c5:a1:a7:42:f1:0d:be:22:19:fe:e8:aa:e5:c6:24:
                    9f:6d:2c:c8:98:5c:7a:58:aa:4a:97:8b:7f:33:3c:
                    9b:67:21:ec:0b:8a:a2:37:eb:81:68:fe:05:e8:7c:
                    8d:bb:b4:6f:18:ba:2e:5e:1a:7b:61:78:25:6e:61:
                    9a:08:f2:02:91:2a:36:94:3c:ba:90:54:0b:36:79:
                    1c:92:ee:bf:67:77:0a:49:98:e0:ce:77:4b:b8:cc:
                    1f:33:2f:be:95:bc:1a:bf:29:4d:54:19:91:59:ea:
                    1a:d1:54:4e:52:dc:8f:80:9e:6a:7d:2b:5f:0f:e6:
                    0d:83:a0:7e:b6:0f:fb:11:0c:14:64:a2:70:f6:48:
                    d5:9f:8c:5f:fa:ee:d5:0e:06:95:c5:c2:36:1a:41:
                    7c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:5F:D7:6D:55:B0:25:1E:54:CE:F6:26:26:B9:18:71:AF:16:5A
            X509v3 Authority Key Identifier:
                keyid:A0:DA:E7:67:8A:39:69:69:E6:34:0C:9D:CB:65:CD:E9:E3:29:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNrnZ4o5aWnmNAydy2XN6eMpVUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/46358e-54f7-4f4b-a747-f735e3dafd53/1/oNrnZ4o5aWnmNAydy2XN6eMpVUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:3d:9c:9f:2a:57:9c:27:7a:67:6c:7e:6d:10:f0:12:98:46:
         f0:b8:ea:cc:75:4d:78:c3:50:e9:9c:bd:aa:b3:bd:05:d4:c5:
         10:1b:93:61:dd:6c:43:8d:36:67:21:d1:d9:73:d4:3d:4c:5a:
         37:f8:88:84:2e:f4:35:94:49:1b:51:76:7c:0b:29:62:5c:01:
         fb:34:b1:ac:57:16:6f:e5:c2:5d:10:63:72:20:fa:d5:0e:64:
         89:1d:1d:1d:83:3f:68:b0:c4:9b:33:ee:22:f2:15:d4:37:3c:
         ef:cc:12:ed:9b:6f:53:89:7d:32:0e:8b:4a:10:d7:a0:27:c7:
         a9:55:a8:77:86:d1:e8:63:17:53:4f:6f:11:66:9b:9c:b3:7a:
         9b:ff:8e:02:21:7e:33:33:fc:18:0b:f3:0b:8e:6a:ce:15:09:
         0b:2d:60:00:4d:48:32:bb:a1:58:c4:d5:75:b6:21:d6:cb:a9:
         dc:4a:58:c1:64:93:6d:70:1c:76:6d:29:e2:8d:01:40:b9:78:
         60:c6:a9:32:72:2d:81:16:b5:5c:e0:ca:bd:7a:37:ba:3d:fa:
         f5:4d:e6:d3:9e:87:cf:ba:e8:6f:8a:09:9d:59:6c:55:50:11:
         e3:30:f2:39:d4:3d:88:14:67:b7:0a:ca:a7:ac:91:a2:b8:b1:
         62:94:ca:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:55:46 2024 by rpki-client on console-ams.rpki-client.org